General
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://62.204.41.121/lend/buildppb.exe
Resource
win7-20220812-en
11 signatures
150 seconds
Malware Config
Extracted
Family
aurora
C2
85.209.135.29:8081
Targets
-
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting